After Exchange migration to 2010.   Does anyone have a script to list all user accounts missing the following were I can pipe it to add permissions for Full, Send As, and remove <username>?

"NT AUTHORITY\SELF" Full Permission
"NT AUTHORITY\SELF" Send As

"<user Name>" Full permission

Hi,

We can use the following command to check the permission on all users own mailboxes.

Get-Mailbox | Get-MailboxPermission | where {($_.User -like NT AUTHORITY\SELF)}

Use the following command to check Send as permission.

Get-Mailbox | Get-ADPermission | where {($_.User -like NT AUTHORITY\SELF)}

Following are the commands to add full access and send as permission.

Get-Mailbox | Add-MailboxPermission  user NT AUTHORITY\SELF -AccessRights FullAccess

Get-Mailbox | Add-ADPermission  user NT AUTHORITY\SELF Extendedrights Send As

Best Regards.

The two command gives users that have the permission but not users that does not.  I need to see who does not have either and both permissions.

Get-Mailbox | Get-MailboxPermission | where {-not ($_.AccessRights -like "*FullAccess*") -and ($_.IsInherited -eq $false) -and ($_.User -like "NT AUTHORITY\SELF")

List of mailboxes without FullAccess permission on themselves.

Based on my knowledge, I can only get a list of users with Send As permission.

Get-mailbox | Get-ADPermission | where {($_.User -like NT AUTHORITY\SELF) -and ($_.Extendedrights -like "*Send-as*") -and ($_.IsInherited -eq $false)}

Hope for the answer of someone else.